CVE-2023-2233 — Missing Authorization in GitLab

Description (CNA)

An improper authorization issue has been discovered in GitLab CE/EE affecting all versions starting from 11.8 before 16.2.8, all versions starting from 16.3 before 16.3.5 and all versions starting from 16.4 before 16.4.1. It allows a project reporter to leak the owner's Sentry instance projects.

Affected (CNA)

Vendor / product	Versions
GitLab / GitLab	affected 11.8 before 16.2.8; affected 16.3 before 16.3.5; affected 16.4 before 16.4.1

CWE

CWE-862

References

https://gitlab.com/gitlab-org/gitlab/-/issues/408359
https://hackerone.com/reports/1947211

ADP enrichment

CVE

No English description supplied.

https://gitlab.com/gitlab-org/gitlab/-/issues/408359
https://hackerone.com/reports/1947211

CISA-ADP

No English description supplied.

No references supplied.